tageszeitung

Warn

Audited by Socket on Nov 13, 2026

1 alert found:

Anomaly
AnomalyLOW
tageszeitung_core.py

This is intended as a local news aggregator and HTML/PDF generator, with no clear evidence of malware, credential theft, or exfiltration. If executable after repairing the incomplete syntax, attacker-controlled source URLs can cause SSRF, unescaped article URLs can inject HTML, and the date argument can influence output paths. PDF generation also launches the executable named by MSEDGE_PATH. These are security concerns, but the fragment contains no clear malicious payload; severity is moderate and runtime assessment is limited because the code is incomplete.

Confidence: 98%Severity: 56%
Audit Metadata
Analyzed At
Nov 13, 2026, 05:44 AM
Package URL
pkg:socket/skills-sh/ellmos-ai%2Fskills%2Ftageszeitung%2F@b4ef54a349b427d0b13fab184216d4f53b153060402d1bdc902c4326466926d1